| snort |
ET TROJAN Win32/Xtrat.A Checkin |
rev 15 |
2022-05-03 |
| snort |
ET EXPLOIT Possible CVE-2017-0199 HTA Inbound M2 |
rev 3 |
2022-05-03 |
| snort |
ET WEB_SERVER SHOW VARIABLES SQL Injection Attempt in URI |
rev 5 |
2022-05-03 |
| snort |
ET SCAN Enumiax Inter-Asterisk Exchange Protocol Username Scan |
rev 6 |
2022-05-03 |
| snort |
ET TROJAN [PTsecurity] Kuriyama Loader Checkin |
rev 4 |
2022-05-03 |
| snort |
ET CURRENT_EVENTS DRIVEBY [PwC CTD] -- MultiGroup - ScanBox and Targetted Watering Holes ActiveX Call |
rev 3 |
2022-05-03 |
| snort |
ET WEB_SPECIFIC_APPS jbShop e107 CMS plugin item_id parameter INSERT INTO SQL Injection Attempt |
rev 3 |
2022-05-03 |
| snort |
ET TROJAN Metasploit Meterpreter core_channel_* Command Request |
rev 5 |
2022-05-03 |
| snort |
ET EXPLOIT Possible CVE-2017-0199 HTA Inbound |
rev 4 |
2022-05-03 |
| snort |
ET WEB_SERVER WebShell ASPXShell - Title |
rev 4 |
2022-05-03 |
| snort |
ET WEB_SPECIFIC_APPS Apache CouchDB Remote Code Execution 1 |
rev 3 |
2022-05-03 |
| snort |
ET TROJAN eCh0raix/QNAPCrypt CnC Activity - Started |
rev 3 |
2022-05-03 |
| snort |
ET INFO EXE - OSX Executable Download - PowerPC Arch |
rev 3 |
2022-05-03 |
| snort |
ET TROJAN Python Monero Miner CnC DNS Query |
rev 4 |
2022-05-03 |
| snort |
ET TROJAN Koobface Checkin via POST |
rev 9 |
2022-05-03 |
| snort |
ET WEB_SERVER Tilde in URI - potential .inc source disclosure vulnerability |
rev 12 |
2022-05-03 |
| snort |
ET TROJAN Win32/Nemty Ransomware Style Geo IP Check M2 |
rev 3 |
2022-05-03 |
| snort |
ET TROJAN Possible Zbot Activity Common Download Struct |
rev 4 |
2022-05-03 |
| snort |
ET TROJAN Possible DANDERSPRITZ Default HTTP Headers |
rev 2 |
2022-05-03 |
| snort |
ET TROJAN RegSubsDat Checkin Off Ports |
rev 5 |
2022-05-03 |
| snort |
ET WEB_SPECIFIC_APPS PRADO PHP Framework functional.php Local File Inclusion Vulnerability |
rev 3 |
2022-05-03 |
| snort |
ET WEB_SERVER Generic Mailer Accessed on Internal Server |
rev 3 |
2022-05-03 |
| snort |
ET TROJAN Known Sinkhole Response Header INetSim |
rev 2 |
2022-05-03 |
| snort |
ET INFO EXE - OSX Executable Download - Intel Arch |
rev 3 |
2022-05-03 |
| snort |
ET ACTIVEX Dell Webcam CrazyTalk ActiveX Control BackImage Access Potential Buffer Overflow Attempt 2 |
rev 6 |
2022-05-03 |
| snort |
ET WEB_SPECIFIC_APPS dev4u CMS SQL Injection Attempt -- index.php gruppe_id INSERT |
rev 7 |
2022-05-03 |
| snort |
ET CURRENT_EVENTS Successful Bank of America Phish 2015-10-29 |
rev 3 |
2022-05-03 |
| snort |
ET TROJAN Powershell with Decimal Encoded RUNPE Downloaded |
rev 3 |
2022-05-03 |
| snort |
ET MALWARE Win32/DownloadAssistant.G Variant Error Report |
rev 3 |
2022-05-03 |
| snort |
ET TROJAN GCleaner Downloader Activity M3 |
rev 4 |
2022-05-03 |
| snort |
ET WEB_CLIENT Malicious SCF File Inbound |
rev 2 |
2022-05-03 |
| snort |
ET TROJAN Octopus Malware CnC Activity |
rev 3 |
2022-05-03 |
| snort |
ET TROJAN Observed Certificate Containing Double Base64 Encoded Executable Inbound |
rev 3 |
2022-05-03 |
| snort |
GPL WEB_SERVER 403 Forbidden |
rev 12 |
2022-05-03 |
| snort |
ET WEB_SERVER LANDesk Command Injection Attempt |
rev 8 |
2022-05-03 |
| snort |
ET EXPLOIT Possible ECLIPSEDWING RPCTOUCH MS08-067 |
rev 3 |
2022-05-03 |
| snort |
ET TROJAN Possible MSIL/Solorigate.G!dha/SUPERNOVA Webshell Access Request |
rev 3 |
2022-05-03 |
| snort |
ET CURRENT_EVENTS [PTsecurity] Grandsoft EK Payload |
rev 3 |
2022-05-03 |
| snort |
ET TROJAN Ponmocup Redirection from infected Website to Trojan-Downloader |
rev 12 |
2022-05-03 |
| snort |
ET TROJAN PE EXE or DLL Windows file download disguised as ASCII |
rev 4 |
2022-05-03 |